Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c5842001-692f-3f07-9920-1fac641a491d.roa
File:                     c5842001-692f-3f07-9920-1fac641a491d.roa (raw, json)
Hash identifier:          vzbMAVexq3hyfKTyoW3eAmLbdi2FcxMQsZWov+CZrgk=
Subject key identifier:   69:13:D7:58:21:CA:16:53:59:11:F2:CA:6B:CA:7C:4F:16:45:0A:7F
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285848CC7B90BFCDC2A13E78775800
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c5842001-692f-3f07-9920-1fac641a491d.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     36561
IP address blocks:        165.85.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:90:bf:cd:c2:a1:3e:78:77:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=e576194e-c862-485e-b8c1-811ef9ffc508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d8:b2:56:c2:70:52:bd:01:50:87:6e:fb:06:
                    dc:6c:69:4b:ba:40:46:ea:6a:22:4a:79:ac:b1:96:
                    eb:5c:57:8a:3a:d0:f1:3b:b3:93:1f:bf:a5:19:6f:
                    1e:6a:e2:7a:57:ac:f8:67:8c:5b:be:c2:f7:2a:27:
                    e0:e7:df:92:27:26:f6:a3:f4:be:40:2d:48:ba:ba:
                    b8:f3:89:4d:93:b8:41:65:bc:72:8e:9c:4c:76:f8:
                    fd:13:ed:c1:b9:e5:92:f6:99:61:02:ec:f5:9d:d9:
                    90:fb:6f:8d:0c:a3:f1:7d:dc:cf:a8:20:3c:16:c0:
                    fc:ea:bf:87:74:a9:8f:5a:09:d1:dc:70:27:22:41:
                    f7:c6:70:45:b9:49:9e:01:cd:14:26:3a:4b:ea:41:
                    09:cf:04:84:c3:3c:4a:5a:cd:8e:01:cf:5d:4a:5c:
                    b2:8b:4c:78:e3:dc:aa:9a:45:0c:6a:d7:53:5d:75:
                    ed:57:15:12:23:22:0c:b3:6f:b4:2e:47:cc:35:12:
                    9f:8c:92:9e:db:46:b8:86:49:ab:88:67:ba:5e:3c:
                    b5:51:ad:99:c5:24:95:cb:52:48:3f:64:0e:0f:a6:
                    78:03:e3:57:46:ce:87:f7:3a:c6:78:bc:34:0c:1c:
                    05:08:9b:64:66:d3:08:31:31:7b:e1:0d:d1:54:56:
                    9c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:13:D7:58:21:CA:16:53:59:11:F2:CA:6B:CA:7C:4F:16:45:0A:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c5842001-692f-3f07-9920-1fac641a491d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d1:fe:c1:7e:41:3b:8a:d8:59:47:80:22:12:f1:5b:48:dc:
         bb:91:f5:9e:e0:80:e8:ca:f8:b8:ca:cc:eb:67:45:ea:c5:8d:
         44:59:03:f9:9d:e0:73:4d:64:c2:63:cf:5c:8d:76:8f:25:52:
         bd:4c:01:d0:7b:99:86:a4:60:73:32:7b:1e:43:1a:07:80:09:
         54:55:0a:cd:4e:e2:ea:6d:87:77:e4:ab:cc:c2:9d:7a:37:25:
         fd:e2:3d:02:e4:2f:df:9b:7d:18:3c:d4:6a:d1:1c:af:83:40:
         20:f7:65:4e:0d:5b:94:e4:74:8f:1d:41:14:ea:34:82:ea:11:
         7f:0a:45:e4:0d:df:3a:67:20:e1:49:29:24:3c:a1:e6:48:62:
         05:df:83:4c:22:ee:bc:bb:a4:71:c2:df:79:9e:88:c3:46:2f:
         9a:5f:35:c0:84:a3:21:fb:44:4c:99:77:94:34:70:4a:36:8b:
         54:e3:ae:b0:5c:0c:f1:b5:7a:de:2e:1c:61:ce:bd:58:b1:80:
         a1:b3:7f:10:e3:f2:80:b9:6e:35:7c:5a:8e:c3:e2:21:c9:b4:
         df:fd:0b:5c:b6:8e:d4:19:26:b6:55:bd:bd:80:be:3c:50:d2:
         bb:0d:f0:1c:d7:60:64:ef:aa:63:15:e2:41:97:08:f0:65:ea:
         3f:25:5f:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5C/zcKhPnh3WAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk
ZTU3NjE5NGUtYzg2Mi00ODVlLWI4YzEtODExZWY5ZmZjNTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNiyVsJwUr0BUIdu+wbcbGlLukBG6moiSnms
sZbrXFeKOtDxO7OTH7+lGW8eauJ6V6z4Z4xbvsL3Kifg59+SJyb2o/S+QC1Iurq4
84lNk7hBZbxyjpxMdvj9E+3BueWS9plhAuz1ndmQ+2+NDKPxfdzPqCA8FsD86r+H
dKmPWgnR3HAnIkH3xnBFuUmeAc0UJjpL6kEJzwSEwzxKWs2OAc9dSlyyi0x449yq
mkUMatdTXXXtVxUSIyIMs2+0LkfMNRKfjJKe20a4hkmriGe6Xjy1Ua2ZxSSVy1JI
P2QOD6Z4A+NXRs6H9zrGeLw0DBwFCJtkZtMIMTF74Q3RVFacDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGkT11ghyhZTWRHyymvKfE8WRQp/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvYzU4NDIwMDEtNjkyZi0z
ZjA3LTk5MjAtMWZhYzY0MWE0OTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApVWWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHR/sF+QTuK2FlHgCIS8VtI3LuR9Z7ggOjK+LjKzOtnRerFjURZA/md
4HNNZMJjz1yNdo8lUr1MAdB7mYakYHMyex5DGgeACVRVCs1O4upth3fkq8zCnXo3
Jf3iPQLkL9+bfRg81GrRHK+DQCD3ZU4NW5TkdI8dQRTqNILqEX8KReQN3zpnIOFJ
KSQ8oeZIYgXfg0wi7ry7pHHC33meiMNGL5pfNcCEoyH7REyZd5Q0cEo2i1TjrrBc
DPG1et4uHGHOvVixgKGzfxDj8oC5bjV8Wo7D4iHJtN/9C1y2jtQZJrZVvb2AvjxQ
0rsN8BzXYGTvqmMV4kGXCPBl6j8lXxk=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:37:13 2025 by rpki-client